@package-broker/runtime-node 0.0.0-bootstrap → 2.0.0-rc.1

package/dist/sources/guarded-fetch.js

@@ -0,0 +1,217 @@
+import { pipeline, Readable } from 'node:stream';
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { isIP } from 'node:net';
+import { createBrotliDecompress, createGunzip, createInflate } from 'node:zlib';
+import { createDnsGuard, DnsGuardError } from './dns-guard.js';
+class TransportError extends Error {
+    code;
+    name = 'TransportError';
+    constructor(code) {
+        super(`transport error: ${code}`);
+        this.code = code;
+    }
+}
+const NULL_BODY_STATUSES = new Set([204, 205, 304]);
+const CODE_PATTERN = /^[A-Z0-9_]{1,40}$/;
+const fetchFailed = (cause) => new TypeError('fetch failed', cause === undefined ? undefined : { cause });
+function findGuardError(error) {
+    if (error instanceof DnsGuardError)
+        return error;
+    if (error instanceof AggregateError) {
+        for (const inner of error.errors) {
+            const found = findGuardError(inner);
+            if (found)
+                return found;
+        }
+    }
+    return undefined;
+}
+function toTransportError(error) {
+    const guard = findGuardError(error);
+    if (guard)
+        return fetchFailed(new DnsGuardError(guard.reason));
+    const code = error?.code;
+    return fetchFailed(new TransportError(typeof code === 'string' && CODE_PATTERN.test(code) ? code : 'UNKNOWN'));
+}
+function decoder(encoding) {
+    switch (encoding?.trim().toLowerCase()) {
+        case 'gzip':
+        case 'x-gzip':
+            return createGunzip;
+        case 'deflate':
+            return createInflate;
+        case 'br':
+            return createBrotliDecompress;
+        default:
+            return undefined;
+    }
+}
+function buildHeaders(raw, decoded) {
+    const headers = new Headers();
+    for (let i = 0; i + 1 < raw.length; i += 2) {
+        const name = raw[i];
+        if (decoded && /^content-(encoding|length)$/i.test(name))
+            continue;
+        headers.append(name, raw[i + 1]);
+    }
+    return headers;
+}
+function toResponse(incoming, method) {
+    const status = incoming.statusCode ?? 0;
+    if (status < 200 || status > 599)
+        throw new RangeError('unsupported status');
+    const decode = method === 'HEAD' ? undefined : decoder(incoming.headers['content-encoding']);
+    const headers = buildHeaders(incoming.rawHeaders, decode !== undefined);
+    if (method === 'HEAD' || NULL_BODY_STATUSES.has(status)) {
+        incoming.resume();
+        return new Response(null, { status, headers });
+    }
+    let source = incoming;
+    if (decode) {
+        const stream = decode();
+        pipeline(incoming, stream, () => undefined);
+        source = stream;
+    }
+    return new Response(Readable.toWeb(source), {
+        status,
+        headers,
+    });
+}
+async function normalizeRequest(input, init) {
+    if (init?.redirect === 'follow')
+        throw new TypeError('redirect follow is not supported');
+    const base = input instanceof Request ? input : undefined;
+    let url;
+    try {
+        url = new URL(base ? base.url : input);
+    }
+    catch {
+        throw new TypeError('invalid url');
+    }
+    const headers = new Headers(init?.headers ?? base?.headers);
+    const method = (init?.method ?? base?.method ?? 'GET').toUpperCase();
+    const raw = init?.body ?? (base?.body ? await base.arrayBuffer() : undefined);
+    let body;
+    if (raw !== undefined && raw !== null) {
+        if (method === 'GET' || method === 'HEAD')
+            throw new TypeError('request body not allowed');
+        if (typeof raw === 'string') {
+            body = new TextEncoder().encode(raw);
+            if (!headers.has('content-type'))
+                headers.set('content-type', 'text/plain;charset=UTF-8');
+        }
+        else if (raw instanceof URLSearchParams) {
+            body = new TextEncoder().encode(raw.toString());
+            if (!headers.has('content-type')) {
+                headers.set('content-type', 'application/x-www-form-urlencoded;charset=UTF-8');
+            }
+        }
+        else if (raw instanceof Uint8Array)
+            body = raw;
+        else if (raw instanceof ArrayBuffer)
+            body = new Uint8Array(raw);
+        else
+            throw new TypeError('unsupported request body');
+    }
+    return { url, method, headers, body };
+}
+/**
+ * Redirects are never followed, whatever init.redirect or a Request default says;
+ * 3xx responses are returned as-is for the caller to vet. An explicit
+ * redirect: 'follow' is rejected.
+ */
+export function createGuardedFetch(policy, options = {}) {
+    const { tls, ...guardOptions } = options;
+    const guard = createDnsGuard(policy, guardOptions);
+    return async (input, init) => {
+        const { url, method, headers, body } = await normalizeRequest(input, init);
+        const signal = init?.signal ?? (input instanceof Request ? input.signal : undefined);
+        if (url.protocol !== 'https:')
+            throw fetchFailed(new DnsGuardError('scheme'));
+        if (signal?.aborted)
+            throw signal.reason;
+        const secure = url.protocol === 'https:';
+        const hostname = url.hostname.startsWith('[') ? url.hostname.slice(1, -1) : url.hostname;
+        const port = url.port === '' ? (secure ? 443 : 80) : Number(url.port);
+        const target = guard.forTarget(url.hostname, port, secure ? 'https' : 'http');
+        const literal = isIP(hostname) !== 0;
+        let connectHost = hostname;
+        if (literal) {
+            let onLiteralAbort;
+            const aborted = new Promise((_, reject) => {
+                onLiteralAbort = () => reject(signal?.reason);
+                signal?.addEventListener('abort', onLiteralAbort, { once: true });
+            });
+            aborted.catch(() => undefined);
+            try {
+                const resolved = await (signal
+                    ? Promise.race([target.resolve(), aborted])
+                    : target.resolve());
+                connectHost = resolved.addresses[0]?.address ?? hostname;
+            }
+            catch (error) {
+                if (signal?.aborted)
+                    throw signal.reason;
+                throw toTransportError(error);
+            }
+            finally {
+                if (onLiteralAbort)
+                    signal?.removeEventListener('abort', onLiteralAbort);
+            }
+        }
+        if (!headers.has('accept-encoding'))
+            headers.set('accept-encoding', 'gzip, deflate, br');
+        const outgoing = Object.fromEntries(headers);
+        outgoing['host'] = url.host;
+        if (body !== undefined)
+            outgoing['content-length'] = String(body.byteLength);
+        const servername = hostname.replace(/\.$/, '');
+        return new Promise((resolve, reject) => {
+            const send = secure ? httpsRequest : httpRequest;
+            const req = send({
+                host: connectHost,
+                port,
+                path: `${url.pathname}${url.search}`,
+                method,
+                headers: outgoing,
+                agent: false,
+                lookup: target.lookup,
+                ...(secure ? { servername: literal ? '' : servername } : {}),
+                ...(secure && tls?.ca !== undefined ? { ca: tls.ca } : {}),
+            });
+            let incoming;
+            const abortReason = () => signal?.reason instanceof Error ? signal.reason : new Error('aborted');
+            const onAbort = () => {
+                incoming?.destroy(abortReason());
+                req.destroy(abortReason());
+                reject(signal?.reason);
+            };
+            const cleanup = () => signal?.removeEventListener('abort', onAbort);
+            signal?.addEventListener('abort', onAbort, { once: true });
+            req.once('close', cleanup);
+            const fail = (error) => {
+                incoming?.destroy();
+                req.destroy();
+                cleanup();
+                reject(signal?.aborted ? signal.reason : toTransportError(error));
+            };
+            req.once('upgrade', (_response, socket) => {
+                socket.destroy();
+                fail(new TransportError('UPGRADE'));
+            });
+            req.once('response', (message) => {
+                incoming = message;
+                try {
+                    resolve(toResponse(message, method));
+                }
+                catch (error) {
+                    fail(error);
+                }
+            });
+            req.once('error', fail);
+            req.end(body === undefined ? undefined : Buffer.from(body));
+        });
+    };
+}
+//# sourceMappingURL=guarded-fetch.js.map

package/dist/sources/guarded-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-fetch.js","sourceRoot":"","sources":["../../src/sources/guarded-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAkD,MAAM,WAAW,CAAC;AACnG,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGhF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;AAMrF,MAAM,cAAe,SAAQ,KAAK;IAEX;IADH,IAAI,GAAG,gBAAgB,CAAC;IAC1C,YAAqB,IAAY;QAC/B,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QADf,SAAI,GAAJ,IAAI,CAAQ;IAEjC,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACpD,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAa,EAAE,CAC/C,IAAI,SAAS,CAAC,cAAc,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAE7E,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,WAAW,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,WAAW,CAChB,IAAI,cAAc,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,QAA4B;IAC3C,QAAQ,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC;QACtB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB,KAAK,IAAI;YACP,OAAO,sBAAsB,CAAC;QAChC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAsB,EAAE,OAAgB;IAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,OAAO,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACnE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,QAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,GAAa,QAAQ,CAAC;IAChC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,EAAyB,CAAC;QAC/C,QAAQ,CAAC,QAAQ,EAAE,MAA0C,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAA0C,EAAE;QACnF,MAAM;QACN,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AASD,KAAK,UAAU,gBAAgB,CAC7B,KAA6B,EAC7B,IAA6B;IAE7B,IAAI,IAAI,EAAE,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,IAA4B,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC3F,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YAC1C,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,YAAY,UAAU;YAAE,IAAI,GAAG,GAAG,CAAC;aAC5C,IAAI,GAAG,YAAY,WAAW;YAAE,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;;YAC3D,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAsB,EACtB,UAA+B,EAAE;IAEjC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEnD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,WAAW,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QAEzC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErC,IAAI,WAAW,GAAG,QAAQ,CAAC;QAC3B,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,cAAwC,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/C,cAAc,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9C,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM;oBAC5B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;oBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtB,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,QAAQ,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;gBACzC,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;oBAAS,CAAC;gBACT,IAAI,cAAc;oBAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAwB,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClE,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE/C,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;gBACpC,MAAM;gBACN,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,IAAI,QAAqC,CAAC;YAE1C,MAAM,WAAW,GAAG,GAAU,EAAE,CAC9B,MAAM,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBACjC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1E,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE3B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;gBACpC,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;YACpE,CAAC,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC/B,QAAQ,GAAG,OAAO,CAAC;gBACnB,IAAI,CAAC;oBACH,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/sources/ssh-archive-store.d.ts

@@ -0,0 +1,19 @@
+import type { OrgContext } from '@package-broker/core/db/port';
+import type { ProviderSource } from '@package-broker/core/sources/provider';
+import type { SshArchiveStore } from './ssh-provider.js';
+export type SshArchiveStoreFailure = 'invalid_options' | 'invalid_archive' | 'invalid_metadata' | 'too_large' | 'unsafe_root' | 'io';
+export declare class SshArchiveStoreError extends Error {
+    name: string;
+    readonly reason: SshArchiveStoreFailure;
+    readonly code?: string;
+    constructor(reason: SshArchiveStoreFailure, code?: string);
+}
+export interface FilesystemArchiveStoreOptions {
+    readonly maxZipBytes: number;
+}
+export interface FilesystemArchiveStore extends SshArchiveStore {
+    readZip(ctx: OrgContext, source: ProviderSource, name: string, versionNormalized: string, commit: string): Promise<Uint8Array | null>;
+}
+export declare function archiveFileName(orgId: string, sourceId: string, name: string, versionNormalized: string, commit: string): string;
+export declare function createFilesystemArchiveStore(root: string, options: FilesystemArchiveStoreOptions): Promise<FilesystemArchiveStore>;
+//# sourceMappingURL=ssh-archive-store.d.ts.map

package/dist/sources/ssh-archive-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-archive-store.d.ts","sourceRoot":"","sources":["../../src/sources/ssh-archive-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAoB,eAAe,EAAmB,MAAM,mBAAmB,CAAC;AAE5F,MAAM,MAAM,sBAAsB,GAChC,iBAAiB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC;AAElG,qBAAa,oBAAqB,SAAQ,KAAK;IACpC,IAAI,SAA0B;IACvC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBACX,MAAM,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM;CAK1D;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAuB,SAAQ,eAAe;IAC7D,OAAO,CACL,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC/B;AA+BD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,GACb,MAAM,CAIR;AAiJD,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,sBAAsB,CAAC,CA2FjC"}

package/dist/sources/ssh-archive-store.js

@@ -0,0 +1,284 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, lstat, mkdir, open, readdir, realpath, unlink } from 'node:fs/promises';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+export class SshArchiveStoreError extends Error {
+    name = 'SshArchiveStoreError';
+    reason;
+    code;
+    constructor(reason, code) {
+        super(`ssh archive store: ${reason}`);
+        this.reason = reason;
+        if (code !== undefined)
+            this.code = code;
+    }
+}
+const STAGING_DIRECTORY = '.staging';
+const STAGING_PREFIX = '.stage-';
+const STALE_STAGING_MS = 60 * 60 * 1000;
+const SHA1 = /^[0-9a-f]{40}$/;
+const TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/;
+const ERRNO = /^E[A-Z0-9]{1,15}$/;
+const READ_FLAGS = constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK;
+const STAGE_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW;
+const DIRECTORY_FLAGS = constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW;
+const FILE_MODE = 0o600;
+const DIRECTORY_MODE = 0o700;
+const STICKY = 0o1000;
+const HEADER_BYTES = 4;
+const MAX_META_BYTES = 1024;
+function code(error) {
+    return error instanceof Error ? error.code : undefined;
+}
+function wrap(error) {
+    if (error instanceof SshArchiveStoreError)
+        return error;
+    const errno = code(error);
+    return new SshArchiveStoreError('io', errno !== undefined && ERRNO.test(errno) ? errno : undefined);
+}
+export function archiveFileName(orgId, sourceId, name, versionNormalized, commit) {
+    return createHash('sha256')
+        .update(JSON.stringify([orgId, sourceId, name, versionNormalized, commit]))
+        .digest('hex');
+}
+async function syncDirectory(directory) {
+    const handle = await open(directory, DIRECTORY_FLAGS);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function requireDirectory(path, create) {
+    if (create) {
+        try {
+            await mkdir(path, { mode: DIRECTORY_MODE });
+        }
+        catch (error) {
+            if (code(error) !== 'EEXIST')
+                throw error;
+        }
+    }
+    const stats = await lstat(path);
+    if (stats.isSymbolicLink() || !stats.isDirectory())
+        throw new SshArchiveStoreError('unsafe_root');
+}
+async function requireTrustedAncestors(root) {
+    const uid = typeof process.getuid === 'function' ? process.getuid() : undefined;
+    for (let path = dirname(root);; path = dirname(path)) {
+        const stats = await lstat(path);
+        const untrustedOwner = uid !== undefined && stats.uid !== uid && stats.uid !== 0;
+        const sharedWritable = (stats.mode & 0o022) !== 0 && (stats.mode & STICKY) === 0;
+        if (untrustedOwner || sharedWritable)
+            throw new SshArchiveStoreError('unsafe_root');
+        if (dirname(path) === path)
+            return;
+    }
+}
+async function sweepStaging(staging) {
+    const cutoff = Date.now() - STALE_STAGING_MS;
+    for (const entry of await readdir(staging)) {
+        if (!entry.startsWith(STAGING_PREFIX))
+            continue;
+        const path = join(staging, entry);
+        const stats = await lstat(path).catch(() => null);
+        if (stats !== null && !stats.isDirectory() && stats.mtimeMs < cutoff) {
+            await unlink(path).catch(() => undefined);
+        }
+    }
+}
+async function prepareRoot(root) {
+    if (process.platform !== 'win32' && (!constants.O_NOFOLLOW || !constants.O_DIRECTORY)) {
+        throw new SshArchiveStoreError('unsafe_root');
+    }
+    if (typeof root !== 'string' || !isAbsolute(root) || resolve(root) !== root) {
+        throw new SshArchiveStoreError('unsafe_root');
+    }
+    await mkdir(root, { recursive: true, mode: DIRECTORY_MODE });
+    await requireDirectory(root, false);
+    if ((await realpath(root)) !== root)
+        throw new SshArchiveStoreError('unsafe_root');
+    const stats = await lstat(root);
+    if (typeof process.getuid === 'function' && stats.uid !== process.getuid()) {
+        throw new SshArchiveStoreError('unsafe_root');
+    }
+    if ((stats.mode & 0o022) !== 0)
+        throw new SshArchiveStoreError('unsafe_root');
+    await requireTrustedAncestors(root);
+    const staging = join(root, STAGING_DIRECTORY);
+    await requireDirectory(staging, true);
+    await sweepStaging(staging);
+}
+async function writeAll(handle, chunk) {
+    let at = 0;
+    while (at < chunk.length) {
+        const { bytesWritten } = await handle.write(chunk, at, chunk.length - at, null);
+        at += bytesWritten;
+    }
+}
+async function readExactly(handle, length, position) {
+    const buffer = new Uint8Array(length);
+    let at = 0;
+    while (at < length) {
+        const { bytesRead } = await handle.read(buffer, at, length - at, position + at);
+        if (bytesRead === 0)
+            throw new SshArchiveStoreError('io');
+        at += bytesRead;
+    }
+    return buffer;
+}
+async function openRegular(path) {
+    let handle;
+    try {
+        handle = await open(path, READ_FLAGS);
+    }
+    catch (error) {
+        if (code(error) === 'ENOENT')
+            return null;
+        throw error;
+    }
+    try {
+        if (!(await handle.stat()).isFile())
+            throw new SshArchiveStoreError('io');
+    }
+    catch (error) {
+        await handle.close().catch(() => undefined);
+        throw error;
+    }
+    return handle;
+}
+async function readStored(handle) {
+    const size = (await handle.stat()).size;
+    const header = await readExactly(handle, HEADER_BYTES, 0);
+    const metaLength = new DataView(header.buffer).getUint32(0);
+    if (metaLength > MAX_META_BYTES || HEADER_BYTES + metaLength > size) {
+        throw new SshArchiveStoreError('io');
+    }
+    const meta = JSON.parse(new TextDecoder().decode(await readExactly(handle, metaLength, HEADER_BYTES)));
+    if (meta === null || typeof meta !== 'object')
+        throw new SshArchiveStoreError('io');
+    const { sha1, time } = meta;
+    if (typeof sha1 !== 'string' || !SHA1.test(sha1) || (time !== null && typeof time !== 'string')) {
+        throw new SshArchiveStoreError('io');
+    }
+    return { record: { sha1, time }, zipOffset: HEADER_BYTES + metaLength, size };
+}
+function encode(built) {
+    if (!(built.zip instanceof Uint8Array) ||
+        typeof built.sha1 !== 'string' ||
+        !SHA1.test(built.sha1)) {
+        throw new SshArchiveStoreError('invalid_archive');
+    }
+    if (built.time !== null && (typeof built.time !== 'string' || !TIME.test(built.time))) {
+        throw new SshArchiveStoreError('invalid_metadata');
+    }
+    const meta = new TextEncoder().encode(JSON.stringify({ sha1: built.sha1, time: built.time }));
+    if (meta.length > MAX_META_BYTES)
+        throw new SshArchiveStoreError('invalid_metadata');
+    const header = new Uint8Array(HEADER_BYTES);
+    new DataView(header.buffer).setUint32(0, meta.length);
+    return [header, meta, built.zip];
+}
+export async function createFilesystemArchiveStore(root, options) {
+    const maxZipBytes = options?.maxZipBytes;
+    if (typeof maxZipBytes !== 'number' || !Number.isSafeInteger(maxZipBytes) || maxZipBytes < 1) {
+        throw new SshArchiveStoreError('invalid_options');
+    }
+    try {
+        await prepareRoot(root);
+    }
+    catch (error) {
+        throw wrap(error);
+    }
+    const staging = join(root, STAGING_DIRECTORY);
+    const finalPath = (ctx, src, name, version, commit) => join(root, archiveFileName(ctx.orgId, src.id, name, version, commit));
+    return Object.freeze({
+        async find(ctx, src, name, version, commit) {
+            try {
+                const handle = await openRegular(finalPath(ctx, src, name, version, commit));
+                if (handle === null)
+                    return null;
+                try {
+                    return { ...(await readStored(handle)).record };
+                }
+                finally {
+                    await handle.close();
+                }
+            }
+            catch (error) {
+                throw wrap(error);
+            }
+        },
+        async readZip(ctx, src, name, version, commit) {
+            try {
+                const handle = await openRegular(finalPath(ctx, src, name, version, commit));
+                if (handle === null)
+                    return null;
+                try {
+                    const stored = await readStored(handle);
+                    const length = stored.size - stored.zipOffset;
+                    if (length > maxZipBytes)
+                        throw new SshArchiveStoreError('too_large');
+                    return await readExactly(handle, length, stored.zipOffset);
+                }
+                finally {
+                    await handle.close();
+                }
+            }
+            catch (error) {
+                throw wrap(error);
+            }
+        },
+        async store(ctx, src, name, built) {
+            const parts = encode(built);
+            if (built.zip.byteLength > maxZipBytes)
+                throw new SshArchiveStoreError('too_large');
+            const target = finalPath(ctx, src, name, built.versionNormalized, built.commit);
+            let tempPath = null;
+            try {
+                await requireDirectory(staging, true);
+                let handle = null;
+                while (handle === null) {
+                    const candidate = join(staging, STAGING_PREFIX + randomBytes(16).toString('hex'));
+                    try {
+                        handle = await open(candidate, STAGE_FLAGS, FILE_MODE);
+                        tempPath = candidate;
+                    }
+                    catch (error) {
+                        if (code(error) !== 'EEXIST')
+                            throw error;
+                    }
+                }
+                try {
+                    for (const part of parts)
+                        await writeAll(handle, part);
+                    await handle.sync();
+                }
+                finally {
+                    await handle.close();
+                }
+                try {
+                    await link(tempPath, target);
+                }
+                catch (error) {
+                    if (code(error) !== 'EEXIST')
+                        throw error;
+                    const existing = await openRegular(target);
+                    await existing?.close();
+                    if (existing === null)
+                        throw new SshArchiveStoreError('io');
+                }
+            }
+            catch (error) {
+                throw wrap(error);
+            }
+            finally {
+                if (tempPath !== null)
+                    await unlink(tempPath).catch(() => undefined);
+            }
+            await syncDirectory(root).catch(() => undefined);
+        },
+    });
+}
+//# sourceMappingURL=ssh-archive-store.js.map

package/dist/sources/ssh-archive-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-archive-store.js","sourceRoot":"","sources":["../../src/sources/ssh-archive-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQ/D,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,sBAAsB,CAAC;IAC9B,MAAM,CAAyB;IAC/B,IAAI,CAAU;IACvB,YAAY,MAA8B,EAAE,IAAa;QACvD,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3C,CAAC;CACF;AAgBD,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,IAAI,GAAG,0EAA0E,CAAC;AACxF,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;AACpF,MAAM,WAAW,GACf,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC;AACnF,MAAM,eAAe,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC;AAC1F,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAE,KAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,oBAAoB,CAC7B,IAAI,EACJ,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,QAAgB,EAChB,IAAY,EACZ,iBAAyB,EACzB,MAAc;IAEd,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;SAC1E,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAe;IAC3D,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACjD,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,cAAc,IAAI,cAAc;YAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;YACrE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7D,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3E,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC9E,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC9C,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,KAAiB;IAC3D,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,EAAE,IAAI,YAAY,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,MAAc,EAAE,QAAgB;IAC7E,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC;QAChF,IAAI,SAAS,KAAK,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC1D,EAAE,IAAI,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,KAAK,UAAU,UAAU,CAAC,MAAkB;IAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,UAAU,GAAG,cAAc,IAAI,YAAY,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAC9B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAC9E,CAAC;IACF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAA+B,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,IACE,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,UAAU,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,OAAsC;IAEtC,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IACzC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,CAChB,GAAe,EACf,GAAmB,EACnB,IAAY,EACZ,OAAe,EACf,MAAc,EACd,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC7E,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACjC,IAAI,CAAC;oBACH,OAAO,EAAE,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAClD,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM;YAC3C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC7E,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;oBACxC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;oBAC9C,IAAI,MAAM,GAAG,WAAW;wBAAE,MAAM,IAAI,oBAAoB,CAAC,WAAW,CAAC,CAAC;oBACtE,OAAO,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7D,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,WAAW;gBAAE,MAAM,IAAI,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAChF,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACtC,IAAI,MAAM,GAAsB,IAAI,CAAC;gBACrC,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClF,IAAI,CAAC;wBACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;wBACvD,QAAQ,GAAG,SAAS,CAAC;oBACvB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;4BAAE,MAAM,KAAK,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC;oBACH,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACvD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtB,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAkB,EAAE,MAAM,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;oBAC1C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC3C,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;oBACxB,IAAI,QAAQ,KAAK,IAAI;wBAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;oBAAS,CAAC;gBACT,IAAI,QAAQ,KAAK,IAAI;oBAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;KAC+B,CAAC,CAAC;AACtC,CAAC"}

package/dist/sources/ssh-git.d.ts

@@ -0,0 +1,46 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+import type { SshKeyMaterial } from '@package-broker/core/sources/credentials';
+import type { DnsGuard } from './dns-guard.js';
+export type SshGitReason = 'invalid_host' | 'invalid_user' | 'invalid_port' | 'invalid_path' | 'invalid_ref' | 'unsafe_temp_path' | 'no_address' | 'connect_failed' | 'host_key_mismatch' | 'auth_failed' | 'not_found' | 'timeout' | 'output_too_large' | 'repository_too_large' | 'git_failed' | 'closed';
+export declare class SshGitError extends Error {
+    readonly reason: SshGitReason;
+    readonly name = "SshGitError";
+    constructor(reason: SshGitReason);
+}
+export interface SshRemote {
+    readonly host: string;
+    readonly port?: number;
+    readonly user?: string;
+    readonly path: string;
+}
+export type SpawnGit = (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;
+export interface SshGitOptions {
+    readonly dnsGuard: DnsGuard;
+    readonly credential: Pick<SshKeyMaterial, 'privateKeyPem' | 'knownHosts'>;
+    readonly tmpRoot?: string;
+    readonly timeoutMs?: number;
+    readonly maxStdoutBytes?: number;
+    readonly maxRepoBytes?: number;
+    readonly spawn?: SpawnGit;
+}
+export interface RemoteRef {
+    readonly name: string;
+    readonly sha: string;
+    readonly peeled?: string;
+    readonly symref?: string;
+}
+export interface FetchOptions {
+    readonly filter: 'blob:none' | 'none';
+    readonly depth: 1;
+}
+export interface SshGitSession {
+    lsRemote(): Promise<RemoteRef[]>;
+    fetchRefs(refs: readonly string[], options: FetchOptions): Promise<void>;
+    catFile(ref: string, path: string): Promise<Buffer>;
+    commitTime(ref: string): Promise<string>;
+    archiveZip(ref: string): Promise<Buffer>;
+    close(): Promise<void>;
+}
+export declare function withSshGitSession<T>(remote: SshRemote, options: SshGitOptions, work: (session: SshGitSession) => Promise<T>): Promise<T>;
+export declare function openSshGitSession(remote: SshRemote, options: SshGitOptions): Promise<SshGitSession>;
+//# sourceMappingURL=ssh-git.d.ts.map

package/dist/sources/ssh-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-git.d.ts","sourceRoot":"","sources":["../../src/sources/ssh-git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAK9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,gBAAgB,CAAC;AAEhE,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,cAAc,GACd,cAAc,GACd,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,YAAY,GACZ,gBAAgB,GAChB,mBAAmB,GACnB,aAAa,GACb,WAAW,GACX,SAAS,GACT,kBAAkB,GAClB,sBAAsB,GACtB,YAAY,GACZ,QAAQ,CAAC;AAEb,qBAAa,WAAY,SAAQ,KAAK;IAExB,QAAQ,CAAC,MAAM,EAAE,YAAY;IADzC,SAAkB,IAAI,iBAAiB;gBAClB,MAAM,EAAE,YAAY;CAG1C;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,QAAQ,GAAG,CACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,YAAY,KAClB,YAAY,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,GAAG,YAAY,CAAC,CAAC;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACjC,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AA2ID,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,aAAa,CAAC,CAkSxB"}